Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File:                     os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier:          /d5ZNNn/idWCFiR2msDAfs8hNHzT5DMlOVoakx8Ciiw=
Subject key identifier:   57:02:D1:37:12:58:F9:FC:CF:2E:31:EC:C3:28:7E:04:56:E4:05:E1
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer:       /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number:          020F
Signing time:             Sat 13 Jun 2026 03:07:35 +0000
Manifest this update:     Sat 13 Jun 2026 03:07:35 +0000
Manifest next update:     Sat 20 Jun 2026 03:07:35 +0000
Files and hashes:         1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: Q41Uza4hujLzf68AbeKfmfhEDumtBRGJYH7JEd0wP6w=)
                          2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
        Validity
            Not Before: Jun 13 03:07:35 2026 GMT
            Not After : Jun 20 03:07:35 2026 GMT
        Subject: CN=6a2cc977-dda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:ec:25:bb:7d:ef:d1:2c:03:4a:4a:1c:78:
                    6a:65:43:67:2e:1c:37:f9:cd:44:08:ed:9e:98:96:
                    29:0a:e4:ae:d7:34:53:82:76:ef:bd:b5:99:6e:35:
                    3e:a0:f6:47:a6:46:7c:96:39:2f:b3:fe:db:ce:e2:
                    5c:4d:69:1c:87:89:50:1e:9b:c2:46:14:c5:a2:a3:
                    5d:b3:40:d1:3e:7f:2a:f8:82:9b:d3:e4:e1:22:b0:
                    c3:b3:a5:f2:66:ab:4f:c7:86:f7:3f:8a:38:5b:ff:
                    85:54:df:e0:25:cf:30:97:16:ec:65:e9:3b:21:4a:
                    c6:a4:fc:3e:81:6b:88:61:86:88:d3:b1:c8:83:a8:
                    96:3f:b8:2e:28:87:49:21:24:fc:53:b7:3c:fa:6c:
                    c2:f5:14:c1:f6:f6:f2:3b:49:19:b0:84:88:b9:02:
                    ba:86:f9:60:19:04:64:04:12:45:92:cc:a1:bd:fb:
                    2e:2f:93:70:80:e4:7c:db:0d:99:be:a7:29:27:f5:
                    15:af:61:f6:67:80:37:2a:dc:84:a9:10:d0:93:87:
                    64:6d:4a:a5:0c:16:51:6e:a7:64:d3:21:5f:eb:65:
                    00:f4:76:39:4b:f6:a7:d2:ae:58:2c:3b:ad:4b:ed:
                    4c:fc:3e:cd:71:bb:44:a5:96:44:fe:d1:2e:63:15:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:D1:37:12:58:F9:FC:CF:2E:31:EC:C3:28:7E:04:56:E4:05:E1
            X509v3 Authority Key Identifier:
                keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:bd:b1:8b:cf:6d:f2:3e:b7:db:c5:a7:c9:0e:b8:a2:8e:
         e8:a4:6c:93:dc:68:8e:dd:ec:0b:ff:ec:46:20:69:12:e3:9e:
         e9:f4:56:ae:1f:52:5e:60:c5:f9:27:d5:09:89:c4:d8:2e:15:
         59:c4:7f:ee:da:4c:75:59:75:73:b2:d7:e7:85:59:70:5f:67:
         47:f8:a8:36:ce:1d:4d:b3:f4:0d:9d:ed:8f:20:84:f8:a7:b4:
         aa:e4:6a:6e:83:13:18:a2:9f:c0:c1:13:b2:fc:48:a7:0a:2e:
         f8:4d:57:1d:65:22:65:6f:80:99:dd:26:67:27:01:f8:ae:e3:
         0f:5f:50:19:ef:aa:20:9d:d7:49:f1:e3:92:da:5c:4a:fe:bb:
         eb:d9:43:db:ef:a9:c4:ec:47:f9:55:4b:ff:73:eb:cb:07:e4:
         c6:53:fc:91:61:16:4d:f6:7b:3b:d6:6c:d6:f4:bb:77:2e:ae:
         90:d5:44:5a:a3:01:d5:d0:26:70:c0:0b:b5:13:c6:20:13:27:
         d6:5f:d8:2a:95:63:9d:dc:41:97:4d:20:87:ca:cd:77:de:3c:
         28:53:39:f8:f1:48:25:b6:59:54:5f:a5:d0:72:b0:87:2f:b8:
         c4:42:70:64:00:c9:52:eb:df:8a:2c:e4:58:bb:53:b8:8f:4b:
         3e:30:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:48 2026 by rpki-client